CVEvulnerability
CVE-2009-0669
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-08-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol.
Affected configurations
• zope zodb (<= 3.8.1)
• zope zodb 3.8
• zope zodb 3.8.0
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html mail.zope.org
- http://osvdb.org/56826 osvdb.org
- http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2 Patch, Vendor Advisory
- http://secunia.com/advisories/36204 Vendor Advisory
- http://secunia.com/advisories/36205 Vendor Advisory
- http://www.securityfocus.com/bid/35987 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/2217 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52379 exchange.xforce.ibmcloud.com
- http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html mail.zope.org
- http://osvdb.org/56826 osvdb.org
- http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2 Patch, Vendor Advisory
- http://secunia.com/advisories/36204 Vendor Advisory
- http://secunia.com/advisories/36205 Vendor Advisory
- http://www.securityfocus.com/bid/35987 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/2217 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52379 exchange.xforce.ibmcloud.com